added extension point to permission graph